(a) ORI may disclose information to other persons for the purpose of providing or obtaining information about research misconduct as permitted under the Privacy Act, 5 U.S.C. 552a .(b) ORI may publish a notice of final agency findings of research misconduct, settlements, and HHS administrative actions and release and withhold information as permitted by the Privacy Act and the Freedom of Information Act, 5 U.S.C. 552 .